CWE:

	Topic	Date	Author
Med.	AEGON LIFE v1.0 Life Insurance Management System SQL injection vulnerability.	25.03.2025	Aslam Anwar Mahimkar
Med.	TeamPass 3.0.0.21 SQL Injection	22.03.2025	Max Meyer
Med.	Jasmin Ransomware SQL Injection Login Bypass	22.03.2025	Buğra Enis Dönmez
Med.	JUX Real Estate 3.4.0 - SQL Injection	10.03.2025	CraCkEr
Med.	Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko	27.02.2025	Maloy Roy Orko
Med.	Library-Card-System | SQL Injection Admin Login Bypass In admin.php | Found By Maloy Roy Orko	24.02.2025	Maloy Roy Orko
Med.	Iranian Cyber Police "FATA.GOV.IR" has an SQL Injection vulnerability	25.01.2025	E1.Coders
Low	VULNERABILITY: Website Iranian goverment admin find and Automatic Bypassing 0day attacker	05.01.2025	E1.Coders
Med.	SmartAgent 1.1.0 SQL Injection	02.11.2024	Alter Prime
Med.	LifterLMS - Blind SQL Injection	25.10.2024	FURKAN KARAARSLAN
Med.	VICIdial 2.14-917a SQL Injection	13.10.2024	Jaggar Henry
Med.	WordPress LMS 4.2.7 SQL Injection	13.10.2024	Avento
Med.	Netman 204 4.05 SQL Injection / Unauthenticated Password Reset	13.10.2024	T. Weber
Med.	PHP-Nuke Top Module SQL Injection	08.10.2024	Emiliano Febbi
High	MD-Pro 1.0.76 Shell Upload / SQL Injection	05.10.2024	Emiliano Febbi
Med.	C-MOR Video Surveillance 5.2401 / 6.00PL01 SQL Injection	10.09.2024	Matthias Deeg
Med.	VICIdial Multiple Authenticated SQL Injection	03.09.2024	h00die
Med.	Dolphin 7.4.2 Blind SQL Injection	08.08.2024	Andrey Stoykov
Med.	WordPress PayPlus Payment Gateway SQL Injection	08.08.2024	j3r1ch0123
Med.	ReadyMade Unilevel Ecommerce MLM Blind SQL Injection / Cross Site Scripting	03.08.2024	OoN_Boy
Med.	Leads Manager Tool SQL Injection / Cross Site Scripting	03.08.2024	OoN_Boy
Med.	Hospital Management System Project In ASP.Net MVC 1 SQL Injection	17.07.2024	0xMykull
Med.	WordPress Poll Maker 5.3.2 SQL Injection	11.07.2024	tmrswrr
Med.	WordPress Poll 2.3.6 SQL Injection	09.07.2024	tmrswrr
Med.	Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution	09.07.2024	Christophe de la Fuent...
Med.	WordPress Video Gallery - YouTube Gallery And Vimeo Gallery 2.3.6 SQL Injection	06.07.2024	tmrswrr
Med.	Xhibiter NFT Marketplace 1.10.2 SQL Injection	02.07.2024	Sohel yousef
Med.	Carbon Forum 5.9.0 Cross Site Request Forgery / SQL Injection	24.06.2024	bRpsd
Med.	AEGON LIFE 1.0 SQL Injection	15.06.2024	Aslam Anwar Mahimkar
Med.	FengOffice 3.11.1.2 SQL Injection	10.06.2024	Andrey Stoykov
Med.	Online Fire Reporting System OFRS SQL Injection Authentication Bypass	07.06.2024	Diyar Saadi
Med.	Boelter Blue System Management 1.3 SQL Injection	07.06.2024	CBKB
Med.	Online Pizza Ordering System 1.0 SQL Injection	07.06.2024	nu11secur1ty
Med.	BWL Advanced FAQ Manager 2.0.3 SQL Injection	02.06.2024	Ivan Spiridonov
Med.	WordPress XStore Theme 9.3.8 SQL Injection	22.05.2024	Abdualhadi Khalifa
Med.	Chat Bot 1.0 SQL Injection	22.05.2024	nu11secur1ty
Med.	Tenant Limited 1.0 SQL Injection	20.05.2024	nu11secur1ty
Med.	Prison Management System SQL Injection Authentication Bypass	13.05.2024	Sanjay Singh
Med.	SOPlanning 1.52.00 SQL Injection	04.05.2024	liquidsky
Med.	FortiNet FortiClient EMS 7.2.2 / 7.0.10 SQL Injection / Remote Code Execution	25.04.2024	Spencer McIntyre
Med.	Centreon 23.10-1.el8 SQL Injection	16.04.2024	Cody Sixteen
Med.	AMPLE BILLS 0.1 SQL injection	15.04.2024	nu11secur1ty
Med.	Moodle 3.10.1 SQL Injection	15.04.2024	Julio Ángel Ferrari
Med.	UP-RESULT 0.1 2024 SQL Injection	08.04.2024	nu11secur1ty
Med.	Daily Expense Manager 1.0 SQL Injection	08.04.2024	Stefan Hesselman
Med.	Human Resource Management System 2024 1.0 SQL Injection	06.04.2024	nu11secur1ty
Med.	Purei CMS 1.0 SQL Injection	30.03.2024	Number 7
Med.	MobileShop master - SQL Injection Vuln.	26.03.2024	HAZIM ARBAŞ
Med.	CSZCMS v1.3.0 SQL Injection (Authenticated)	20.03.2024	Abdulaziz Almetairy
Med.	Human Resource Management System 1.0 SQL Injection	13.03.2024	Srikar
Med.	WordPress Hide My WP SQL Injection	11.03.2024	Xenofon Vassilakopoulo...
Med.	Enrollment System v1.0 SQL Injection	03.03.2024	Gnanaraj Mauviel
Med.	Membership Management System 1.0 SQL Injection	01.03.2024	SoSPiro
Med.	WP Fastest Cache 1.2.2 Unauthenticated SQL Injection	29.02.2024	Meryem Taşkın
Med.	Blood Bank 1.0 SQL Injection	28.02.2024	Ersin Erenler
Med.	WordPress WP Fastest Cache 1.2.2 SQL Injection	28.02.2024	Meryem Taskin
Med.	Simple Inventory Management System v1.0 email SQL Injection	27.02.2024	SoSPiro
Med.	Fuelflow 1.0 SQL Injection	25.02.2024	nu11secur1ty
Med.	Cacti pollers.php SQL Injection / Remote Code Execution	07.02.2024	Christophe de la Fuent...
Med.	Bank Locker Management System SQL Injection	02.02.2024	SoSPiro
High	xbtitFM 4.1.18 SQL Injection / Shell Upload / Traversal	22.01.2024	Who cares anyway
Med.	WordPress RSVPMaker 9.3.2 SQL Injection	17.01.2024	Amirhossein Bahramizad...
Med.	Copyright Loan Management System 2024 1.0 SQL Injection	13.01.2024	nu11secur1ty
Med.	AdvantechWeb/SCADA 9.1.5U SQL Injection	10.01.2024	Cody Sixteen
High	Hospital Management System 4.0 XSS / Shell Upload / SQL Injection	24.12.2023	Louise Ng
Med.	GilaCMS 1.15.4 SQL Injection	24.12.2023	Louise Ng
Low	Webnink - sql injection Vulnerability	08.11.2023	nabeghehtech
Med.	WordPress AI ChatBot 4.8.9 SQL Injection / Traversal / File Deletion	27.10.2023	Marco Wotschka
Med.	NLB mKlik Makedonija 3.3.12 SQL Injection	16.10.2023	Neurogenesia
Med.	WordPress WP ERP 1.12.2 SQL Injection	16.10.2023	Arvandy
Med.	ChurchCRM 4.5.4 SQL Injection	16.10.2023	Arvandy
Med.	Dawa Pharma 1.0-2022 SQL Injection	14.10.2023	nu11secur1ty
Med.	Smart School 6.4.1 SQL Injection	11.10.2023	CraCkEr
Med.	Academy LMS 6.2 SQL Injection	20.09.2023	CraCkEr
Med.	Taskhub 2.8.7 SQL Injection	20.09.2023	CraCkEr
Med.	WordPress Slimstat Analytics 5.0.9 Cross Site Scripting / SQL Injection	13.09.2023	Lana Codes
Med.	Shuttle Booking Software 1.0 SQL Injection	13.09.2023	nu11secur1ty
Med.	Equipment Rental Script 1.0 SQL Injection	13.09.2023	nu11secur1ty
Med.	Meeting Room Booking System 1.0 SQL Injection	10.09.2023	nu11secur1ty
High	Online ID Generator 1.0 SQL Injection / Shell Upload	31.08.2023	nu11secur1ty
Med.	Business Directory Script 3.2 SQL Injection	26.08.2023	nu11secur1ty
Med.	User Registration And Login And User Management System 3.0 SQL Injection	24.08.2023	Ashutosh Singh Umath
Med.	Global Multi School Management System Express 1.0 SQL Injection	23.08.2023	Ahmet Umit Bayram
Med.	Color Prediction Game 1.0 SQL Injection	23.08.2023	Ahmet Umit Bayram
Med.	OVOO Movie Portal CMS 3.3.3 SQL Injection	23.08.2023	Ahmet Umit Bayram
Med.	Online Diagnostic Lab Management 1.0 SQL Injection	01.08.2023	nu11secur1ty
Med.	Hikvision Hybrid SAN Ds-a71024 SQL Injection	21.07.2023	Thurein Soe
Med.	Faculty Evaluation System v1.0 SQL Injection	21.07.2023	Andrey Stoykov
Med.	Wifi Soft Unibox Administration 3.0 / 3.1 SQL Injection	21.07.2023	Ansh Jain
Med.	CMS SAUDI SOFTECH 5.0.2 SQL Injection	21.07.2023	indoushka
Med.	Groomify v1.0 SQL Injection	06.07.2023	Ahmet Ümit BAYRAM
Med.	WordPress WP AutoComplete Search 1.0.4 SQL Injection	05.07.2023	Matin Nouriyan
Med.	Beauty Salon Management System 1.0 SQL Injection	05.07.2023	Fatih Nacar
Med.	SPIP 4.2.3 SQL Injection	30.06.2023	nu11secur1ty
Med.	MOVEit SQL Injection	25.06.2023	bwatters-r7
Med.	SCRMS 2023-05-27 1.0 Multiple SQL Injection	22.06.2023	nu11secur1ty
Med.	ACJWEB DESIGNER 1.0 SQL Injection	22.06.2023	indoushka
Med.	Expert Job Portal Management System 1.0 SQL Injection	07.06.2023	CraCkEr
Med.	PrinterLogic Build 1.0.757 XSS / SQL Injection / Authentication Bypass	30.05.2023	Nadeem Salim
Med.	Stackposts Social Marketing Tool v1.0 SQL Injection	27.05.2023	Ahmet Ümit BAYRAM

---

CVEMAP Search Results

CVE

Details

Description

2024-10-21

	CVE-2024-10196	Updating...	A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /add_new_invoice.php. The manipulation of the argument text leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
	CVE-2024-47328	Updating...	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Automation By Autonami allows SQL Injection.This issue affects Automation By Autonami: from n/a through 3.1.2.

2024-10-20

	CVE-2024-10170	Updating...	A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file get_doctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
	CVE-2024-10169	Updating...	A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
	CVE-2024-10167	Updating...	A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
	CVE-2024-10166	Updating...	A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
	CVE-2024-10165	Updating...	A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
	CVE-2024-10163	Updating...	A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical. Affected is an unknown function of the file /msrps/movie_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher disclosure mentions a slightly changed product name.
	CVE-2024-10162	Updating...	A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php of the component Edit Subdomain Details Page. The manipulation of the argument sadminusername/fullname/emailid/mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "mobilenumber" to be affected. But it must be assumed that other parameters are affected as well.
	CVE-2024-10160	Updating...	A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "fdate" to be affected. But it must be assumed "tdate" is affected as well.

 

---

Copyright 2025, cxsecurity.com